[LARTC] limit number of TCP connections.

2004-10-25 Thread Cristiano Soares



Hi all. I have a simple question. Is that a way to 
limit the number os TCP or UDP connection of a single HOST in my 
network?
For exemple:
 I have a host with IP 
192.168.1.202 and he is using edonkey, Kazaa, and Bittorrent at the same time, 
and he also is infected by a virus that opens more than 500 TCP ports at the 
same time. So, i want to limit that host to be able to open no more then 30 TCP 
connections at once, so he wouldnt hurt the other users.

Thanks in advance,


Cristiano Soares


[LARTC] limit upstream/bandwidth.

2004-05-20 Thread Cristiano Soares





Does anyone know a way to limit just the upload? I 
want to limit the bandwidth of a specific user. Ex:.

192.168.1.20 = 128kbit upstream
192.168.1.21 = 150kbit upstream
.
.
.
.
.



Thanks a lot.

Critiano


[LARTC] shape outgoing/upload traffic PER-IP.

2004-05-04 Thread Cristiano Soares



does anyone know a way to shape outgoing/upload 
traffic per ip?

I have a network and i want to limit the 
uploadwith 100kbit per user. Ex:

192.168.1.20  1024kbit-DOWN / 
100kbit-UP
192.168.1.21  1024kbit-DOWN / 
100kbit-UP
and so on...


Ive tried CBQ and HTB, but couldnt get is right. 
the only thing that I did in upload bases was: 
"tc qdisc add dev ppp0 root tbf rate 220kbit latency 50ms 
burst 1540"

witch is for the whole interface. not for a simple 
IP.


Thanks a lot.

Cristiano Soares



[LARTC] TCNG per IP...

2004-04-13 Thread Cristiano Soares



Hi all. Im trying to shape some traffic, and i see 
that the best way to do that is using TCNG. The thing is: I dont know how to 
shape bandwidth per IP. Exemple:

192.168.1.20  256kbit(down) 
128kbit(up)

192.168.1.21  512kbit(down) 
128kbit(up)

192.168.1.22  180kbit(down) 
128kbit(up)

192.168.1.23  768kbit(down) 
128kbit(up)
.
.
.



Does anyone has an exemple script that i could just 
edit it and use? Thanks a lot.

Cristiano


[LARTC] link redundancy...

2004-04-09 Thread Cristiano Soares



Does anyone know how to make a link redundancy? I 
have two ADSL lines, and i want the linux machine to be able to switch between 
the two lines everytime the first ADSL line goes down. Thanks a 
lot.

Cristiano


[LARTC] traffic shaping on single ip...

2004-04-08 Thread Cristiano Soares




Hi all. Im using the following CQB shaper to shape 
IP addresses:

DEV=eth1 (internal eth)

tc qdisc del dev $DEV roottc qdisc add dev $DEV 
root handle 1: cbq avpkt 1000 bandwidth 100mbit
tc class add dev $DEV parent 1: classid 1:1 cbq 
rate 256kbit allot 1500 prio 5 bounded isolatedtc class add dev $DEV parent 
1: classid 1:2 cbq rate 512kbit allot 1500 prio 5 bounded isolated

tc filter add dev $DEV parent 1: protocol ip prio 
16 u32 match ip dst 192.168.2.230 flowid 1:2tc filter add dev $DEV parent 1: 
protocol ip prio 16 u32 match ip src 192.168.2.230 flowid 1:2

tc filter add dev $DEV parent 1: protocol ip prio 
16 u32 match ip dst 192.168.2.188 flowid 1:1tc filter add dev $DEV parent 1: 
protocol ip prio 16 u32 match ip src 192.168.2.188 flowid 1:1

tc filter add dev $DEV parent 1: protocol ip prio 
16 u32 match ip dst 192.168.2.172 flowid 1:1tc filter add dev $DEV parent 1: 
protocol ip prio 16 u32 match ip src 192.168.2.172 flowid 1:1

The thing is, i want to be able to shape inbound 
different from outbound traffic. I use an ADSL line so, i need to shape up 
significantly lower than down. Thanks a lot.
And also, is there a better way to shape traffic 
like this? Thanks a lot.

Cristiano


[LARTC] cant get FAIL-OVER to work...

2004-04-06 Thread Cristiano Soares



Hi all. Im having a problem that isdriving me crazy. 
I cant get link fail-over to work in my RedHat9 Linux. I have two ADSL lines 
exactly the same speed, and im doing NAT with the linux box. Whenever the first 
line (eth2 in my case) goes down, i run abash script that i made to change 
the default route to the backup line (eth0). eth1 is my internal network. I want 
to be able to make the linux box do that for me. I already triedmany load 
balancing sites, but still cant figure it out. I just gave up today, and i want 
to know if any good soul would help me to make it work by getting into my Redhat 
box using SSH. Thanks a lot everyone.

My ICQ is: 3794264
My MSN is: [EMAIL PROTECTED]

Cristiano Soares